Web proxy with advanced filtering capabilities.

Privoxy is a non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, controlling access, and removing ads and other obnoxious Internet junk. Privoxy has a flexible configuration and can be customized to suit individual needs and tastes. It has application for both stand-alone systems and multi-user networks. Privoxy is based on Internet Junkbuster(tm).

What's New

Version 3.0.21:

Bug Fixes:

On POSIX-like platforms, network sockets with file descriptor values above FD_SETSIZE are properly rejected. Previously they could cause memory corruption in configurations that allowed the limit to be reached.

Ratings

Details

Privoxy is a non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, controlling access, and removing ads and other obnoxious Internet junk. Privoxy has a flexible configuration and can be customized to suit individual needs and tastes. It has application for both stand-alone systems and multi-user networks. Privoxy is based on Internet Junkbuster(tm).

Version 3.0.21:

Bug Fixes:

On POSIX-like platforms, network sockets with file descriptor values above FD_SETSIZE are properly rejected. Previously they could cause memory corruption in configurations that allowed the limit to be reached.

Proxy authentication headers are removed unless the new directive enable-proxy-authentication-forwarding is used. Forwarding the headers potentially allows malicious sites to trick the user into providing them with login information. Reported by Chris John Riley.

Compiles on OS/2 again now that unistd.h is only included on platforms that have it.

General improvements:

The show-status page shows the FEATURE_STRPTIME_SANITY_CHECKS status.

A couple of assert()s that could theoretically dereference NULL pointers in debug builds have been relocated.

Added an LSB info block to the generic start script. Based on a patch from Natxo Asenjo.

The max-client-connections default has been changed to 128 which should be more than enough for most setups.

Stop blocking '/js/slider.js'. Reported by Adam Piggott in #3606635 and _lvm in #2791160.

Filter file improvements:

Added an iframes filter.

Documentation improvements:

The whole GPLv2 text is included in the user manual now so Privoxy can serve it itself and the user can read it without having to wade through GPLv3 ads first.

Properly numbered and underlined a couple of section titles in the config that where previously overlooked due to a flaw in the conversion script. Reported by Ralf Jungblut.

Improved the support instruction to hopefully make it harder to unintentionally provide insufficient information when requesting support. Previously it wasn't obvious that the information we need in bug reports is usually also required in support requests.

Removed documentation about packages that haven't been provided in years.

Privoxy-Regression-Test:

Only log the test number when not running in verbose mode. The position of the test is rarely relevant and it previously wasn't exactly obvious which one of the numbers was useful to repeat the test with --test-number.

GNUmakefile improvements:

Factor generate-config-file out of config-file to make testing more convenient.